Behavioral task
behavioral1
Sample
NEAS.1ccbac08487f8730d6b1c87893340760_JC.exe
Resource
win7-20231020-en
General
-
Target
NEAS.1ccbac08487f8730d6b1c87893340760_JC.exe
-
Size
341KB
-
MD5
1ccbac08487f8730d6b1c87893340760
-
SHA1
5fe05995f9ee1de91a9f23de4ed9d8416c3ead82
-
SHA256
0ce8237a208cb9c07140e0b8269b3db302bcb0333ee5998721c42cd4471427c8
-
SHA512
c07554060f70a2ac8e28587a23bfcc90fdc684729d367ed3d12a5e8bab5bbb07fdc86dc1557afa9267ff20185cf630b0aa710bc94f2fdd46e5d9f58b334b9d72
-
SSDEEP
6144:vKijkqa0S4WhxkTuWpovm53ij/gzCp4sJss4x8laE1qdrlRoYp9l:vPYdth+poo3i/xJsRxV9nRD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource NEAS.1ccbac08487f8730d6b1c87893340760_JC.exe unpack001/out.upx
Files
-
NEAS.1ccbac08487f8730d6b1c87893340760_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 309KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 452KB - Virtual size: 451KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 180KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE